Critical vulnerabilities in TP-Link Archer NX routers, highly popular in Europe, allow unauthenticated attackers to bypass login and upload new firmware.
Maybe another reason to pick up a different router ...